Getting Started

What is UprootSecurity, and how do I get to audit-ready?
How do people get into UprootSecurity — and who gets console access?
Who can do what in UprootSecurity?
Onboarding your team: what your employees do in My Uproot
Owners: who's accountable for each control, policy and vendor
What UprootSecurity can see: the Uproot Agent and your connected tools
What are these emails from UprootSecurity, and do I need to act on them?

Vendor Management

Is your vendor a subprocessor, a reseller or storing PII?
What counts as a vendor — and what doesn't
Answer the questionnaire yourself or send it to the vendor?
What does a vendor review need before I can complete it?
Setting the vendor risk level — and when to override the AI
Collecting vendor security reports (SOC 2, SOC 3, ISO, pentest, service agreement)
Vendor review findings and the Risk Register ('Add to Register')
Review cadence and 'Due for Review': when the next review starts and why the status changes
Assigning a vendor owner and who can manage vendors
What do Active, Inactive and Off Boarded mean — and when should I delete a vendor instead?

Frameworks, Controls & Tests

MCP

Connect your AI assistant to UprootSecurity
What your assistant can see — and what it can change
What you can get done with your assistant
Why a capability is missing, or a request failed
Uploading evidence with your assistant
What to keep human

Tests | Uprootsecurity

Home/Frameworks, Controls & Tests/Tests

Tests

S

By Santhosh

11 articles

Ticketing

How UprootSecurity decides whether a ticketing test passes
What belongs under each ticketing label
What a ticket has to contain to stand up in an audit
Make the compliant ticket the default with templates and automation

VCS - Version Control System

How UprootSecurity grades your version control
Telling UprootSecurity which CI checks to look for

Powered By SparrowDesk

Why we grade pull requests, not your main branch

Building a release process when you don't have one

Which repositories are graded, and how to take one out of scope

What UprootSecurity reads from your repositories

Setting up your checks: what each one should do